dtsweb-prod.cloud01.cd.scania.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:ec:9e:7f:21:dc:8a:1d:a6:45:80:d0:7c:7d:6f:b2 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dtsweb-prod.cloud01.cd.scania.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ec:9e:7f:21:dc:8a:1d:a6:45:80:d0:7c:7d:6f:b2
Serial Number (int): 14520876709637015562800069633873113010
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:74:cc:ea:fc:ec:46:4c:36:e8:d0:27:e3:7f:90:4b:b9:e9:d6:e9
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4a:3f:b1:3a:ed:e4:cc:43:2d:0d:6a:3e:e2:06:90:3e:19:49:55:2f
Fingerprint (sha256): 01:a6:ef:0d:62:cf:e3:d9:cf:79:ad:16:a0:1f:63:f1:d2:f4:a1:1c:e8:a2:8b:b5:53:48:8a:bd:12:c6:f3:87

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dtsweb-prod.cloud01.cd.scania.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dtsweb-prod.cloud01.cd.scania.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dtsweb-prod.cloud01.cd.scania.com

Other certificates including the domain name scania.com

(limited to 100 certificates)
www.shopb2b.scania.com
rsc.cdn77.org
spii.scania.com
sparta.devtest.aws.scania.com
backend.omega.onappcdn.com
scaniaconfluence.prod.aws.scania.com
mobat.scania.com
standardsapi.tdquredev.devtest.aws.scania.com
webuyanyscania.uk.devtest.aws.scania.com
one.stage.scania.com
ws.conversion-dev.devtest.aws.scania.com
corporate-intranet.scania.com
ambari.streaming.prod.aws.scania.com
*.r.worldssl.net
myebapp.clad-playground.devtest.aws.scania.com
internal-equipmentusage.apivp.cs.scania.com
api.integration-dev.devtest.aws.scania.com
*.module.cava-staging.prod.aws.scania.com
web.cvss-dev.devtest.aws.scania.com
saps.dce.scania.com
ddmadmin.testdiagnosticinformation.cs.scania.com
static.clad.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
*.cava-dev.devtest.aws.scania.com
rfms2-status.testapies.cs.scania.com
chatbot.sfl.devtest.aws.scania.com
proxora-dev.cloud01-np.cd.scania.com
polarion-rms.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
sparta.devtest.aws.scania.com
homepage.devtools.devtest.aws.scania.com
fact.ema.prod.aws.scania.com
pre-comptool.scania.com
invoice-api.conversion-preprod.devtest.aws.scania.com
accounts.clad.devtest.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
sp-maintenancereportemailservice-api.apisp.cs.scania.com
test.calsium.devtest.aws.scania.com
rsc.cdn77.org
backend.omega.onappcdn.com
selfbilling.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
apicf.cs.scania.com
apim.devtest.aws.scania.com
identity.iron.cd.scania.com
polarion-rms.scania.com
identity.team-torch.devtest.aws.scania.com
oliver.pii-dev.devtest.aws.scania.com
adminlocalization.testapicd.cs.scania.com
ocs.scania.com
auth.clad.devtest.aws.scania.com
sgws.scania.com
win.caos.devtest.aws.scania.com
test.coc.devtest.aws.scania.com
apivp.cs.scania.com
calsiumhistory.scania.com
*.salesportal.prod.aws.scania.com
saps.np-dce.scania.com
keycloak.digitaldealer.prod.aws.scania.com
slapool01.scania.com
complete.scania.com
gbdesktop.scania.com
sp-grafana.apisp.cs.scania.com
monaws.np-dce.scania.com
preprod.jira-greenfield.prod.aws.scania.com
orderdiagnosticreadout.testdiagnosticinformation.cs.scania.com
apisp.cs.scania.com
ecs.apicd.cs.scania.com
mock.sws-dev.devtest.aws.scania.com
win.dev.aws.scania.com
puppet.sws-dev.devtest.aws.scania.com
*.scania.com
demo.sws-test.devtest.aws.scania.com
reflex-test.scania.com
testapird.cs.scania.com
saps.np-dce.scania.com
puppet-master.sws-prod.prod.aws.scania.com
saps.dce.scania.com
*.ccp.devtest.aws.scania.com
backend.omega.onappcdn.com
crp.prod.aws.scania.com
cloud.scania.com
complete.scania.com
saps.np-dce.scania.com
slapool01.scania.com
gitlab-dashboard.test.cs.scania.com
connect.shadow.devtest.aws.scania.com
dev.coc.devtest.aws.scania.com
fleetmonitor.scania.com
*.ithelp.scania.com
saps.dce.scania.com
uploadservice.diagnosticinformation.cs.scania.com
premacperiodicoptimizer.scania.com
saps.dce.scania.com
*.r.worldssl.net
multi-auth.sws-dev.devtest.aws.scania.com
mobat.scania.com
*.ciam.devtest.aws.scania.com

Certificate

The complete raw certificate details for dtsweb-prod.cloud01.cd.scania.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEmDCCA4CgAwIBAgIQCuyefyHcih2mRYDQfH1vsjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MzAwMDAwMDBaFw0yMDA5MzAx
MjAwMDBaMCwxKjAoBgNVBAMTIWR0c3dlYi1wcm9kLmNsb3VkMDEuY2Quc2Nhbmlh
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ/W9aSnyQUzhFmy
Xi5FfK7TndhhrlA32hFQUA83YJrntiMUJiveu4Q8aRmFt/NVrQu8R5mHapDPoM8x
47VmqdGLGIcK3lspYG90UsWaSEydJOk+0ZsnV1jhDTZj8LCUCdoMuXHX5rBQvjC3
cz/TIwE5lmGY3rW/zdViyZIWFw8pjBgIYgfUuo+Cz5YqkRhssxx7Sk5/L/NRM3Bd
f1t0cyRED8PPH4xalYclF9uqKkcSeO9AeloGUmn2z0tsTGCCMSaxXZcSWoqvbdwg
gte3U8OGkjZoxx6QxQFAJRUKYFPYnb7UUi/6dqJyj9S9fk5QrJeKLGF09bcxpgJu
ZV+cQWECAwEAAaOCAZowggGWMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb
+T3QMB0GA1UdDgQWBBRVdMzq/OxGTDbo0Cfjf5BLuenW6TAsBgNVHREEJTAjgiFk
dHN3ZWItcHJvZC5jbG91ZDAxLmNkLnNjYW5pYS5jb20wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs
hipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYD
VR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAt
BggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYG
CCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2Ex
Yi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAeRAN9WTkXKbuPtThRHOMts89RP4UwPEnea2LGaY1xuQZbycd
2r54vPx6ZkEKWXL94REC+4ts9xL6q5r/xlW/zAtXnsGgQiRAB7aVTGGJUgbru6iA
yz/+69qlvP5/rkzONoDss2/O6UCcDQYq6Olj6rX/AoIZNFQf+MwwkEUUIvwRNvwG
G5ivxuFBt3wsmRi2kHLsviL8QCfMI1nkiwm6UqbmmwcpgsK4uWyY1Vh90HYOFQ0M
m2TRGl3TOiX6czSPcteRt+8SePXXqfTGdbbFl0vb0ozQlF9L9pjKJDQECb15gGRN
nIAkaFPLK4a2Jw0Q7IUGEieMy9GsHaQT+F7iww==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9b1pKfJBTOEWbJeLkV8
rtOd2GGuUDfaEVBQDzdgmue2IxQmK967hDxpGYW381WtC7xHmYdqkM+gzzHjtWap
0YsYhwreWylgb3RSxZpITJ0k6T7RmydXWOENNmPwsJQJ2gy5cdfmsFC+MLdzP9Mj
ATmWYZjetb/N1WLJkhYXDymMGAhiB9S6j4LPliqRGGyzHHtKTn8v81EzcF1/W3Rz
JEQPw88fjFqVhyUX26oqRxJ470B6WgZSafbPS2xMYIIxJrFdlxJaiq9t3CCC17dT
w4aSNmjHHpDFAUAlFQpgU9idvtRSL/p2onKP1L1+TlCsl4osYXT1tzGmAm5lX5xB
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14520876709637015562800069633873113010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dtsweb-prod.cloud01.cd.scania.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20177890991290738639943444358763418620532213440295148552840560888561816204454482710257772465062088320401963930869280137745964152968539141353471262822763860875132149849052031110227232888388984008187488925415607871443082958503009006097031925777020560582039430624056406280763727295144155573449042207278574579253276660913433291236726194457759868290185493090498053938216535836721464963311164645624433824798126109951467577375338419971604247605703081339709150520122502473181237874121340378584337317273324944156499368139595929943658794204094460017725795902051734195073220394550945428044004148693450761726639300936566769992033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5574cceafcec464c36e8d027e37f904bb9e9d6e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtsweb-prod.cloud01.cd.scania.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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